PHP2Shell: therefore the service is not affected
You may have seen the news about PHP2Shell, two critical security flaws in the PHP programming language. We want to give you a clear message right away: the service does not use PHP and is not affected by the flaws. You do not need to do anything, neither in the service nor in the app.
Below we have collected answers to the questions that may arise.
What happened?
PHP is used by a large portion of the world's websites, including in publishing tools like WordPress. On October 21, security updates were released for two flaws in PHP. The flaws allow an attacker to run custom code on servers where PHP has not been updated. They are already being exploited in attacks, and the National Cybersecurity Center urges everyone using PHP to update as soon as possible.
Frequently asked questions
Can we continue to use the service as usual?
Yes. Neither calls, queues, the app nor your mobile subscriptions are affected. You also do not need to change your password or change any settings.
Why is the service not affected?
The flaws are in PHP, and the service is built with a different technology. We have reviewed the platform and can confirm that PHP is not used in what we deliver to you. We have also seen nothing to indicate that your data has been affected.
Do we need to do something in our own business?
It might be worth checking. Do you have your own website, for example in WordPress, or other systems that use PHP? Then check with your web host or the person who manages the operation that PHP is updated. The same applies to your own integrations that you have connected to the service, if they run on PHP.
How do we protect ourselves against fraud attempts?
Fraudsters like to take advantage of when a security news story gets a lot of attention. Be vigilant for unexpected emails, texts, and calls asking for login details or wanting you to click on a link. We never ask for your passwords. Unique passwords and two-step verification where possible are always a good protection.
How do we know if something changes?
We are monitoring developments and following both the authorities' recommendations and information from our suppliers. If anything changes that requires action on your part, we will contact you immediately.
Do you have any questions?
Please contact our support.